Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
File: AYGCKpyioAj1zRG5-duhbuLGFFk.mft (raw, json)
Hash identifier: IT851TIcygshaq0PjtsvQ3LpSXMfRoVffecc/x6AoM8=
Subject key identifier: 50:95:72:55:9B:BE:E1:AC:34:0A:44:6B:13:C0:FB:EE:97:AA:81:60
Authority key identifier: 01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
Certificate issuer: /CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Certificate serial: 019DB2B444E8A288A60F829E95F164871EA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
Manifest number: 0414
Signing time: Wed 22 Apr 2026 01:00:51 +0000
Manifest this update: Wed 22 Apr 2026 01:00:51 +0000
Manifest next update: Thu 23 Apr 2026 01:00:51 +0000
Files and hashes: 1: AYGCKpyioAj1zRG5-duhbuLGFFk.crl (hash: enc1F3E0Pg5RwJyJbUxyl+m/cWDtdU+mFD7ZTqzhefY=)
2: Ys_4DR1wULGBNA_eDYgXZEWOD2Q.roa (hash: qjKc7M+pEY0qhXBmrNC0EBe740v+5vXbrYaxAIWy74Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Apr 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:b4:44:e8:a2:88:a6:0f:82:9e:95:f1:64:87:1e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Validity
Not Before: Apr 22 01:00:51 2026 GMT
Not After : Apr 23 01:00:51 2026 GMT
Subject: CN=509572559bbee1ac340a446b13c0fbee97aa8160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:91:11:4b:16:09:a2:5a:05:03:67:1f:5c:a8:
4b:36:ba:d4:d5:ab:23:52:59:96:65:2a:ee:b6:7f:
ab:8b:7a:72:57:66:c4:b5:aa:39:d4:90:01:26:4e:
41:d5:b7:51:e4:a8:8a:12:1f:72:43:cb:7e:1f:75:
36:3e:a8:93:b7:e1:93:f8:a9:ee:41:07:3b:49:e3:
a0:43:3b:f1:e4:bb:8a:2f:76:32:e2:c8:a3:a2:71:
6f:9d:da:f1:72:f4:4b:31:75:37:42:d9:1c:f2:1b:
3e:0d:63:38:e8:52:18:ba:bb:c7:47:9b:58:57:2a:
1f:c5:2c:14:a0:04:38:00:d9:18:c2:4c:3e:98:f8:
78:4a:3b:6e:f9:9b:6c:fb:77:34:14:36:61:c9:e8:
a9:0b:2a:c4:9f:1d:9d:ca:58:5d:b8:16:49:32:5b:
72:8a:24:4d:3c:23:ba:63:5b:f6:dc:be:12:f5:94:
f5:a8:c8:64:d3:3f:39:76:ee:f9:90:29:3b:3e:52:
db:63:cb:ef:0e:f6:01:f7:72:da:ae:5e:55:1d:8e:
0c:ae:51:75:94:fc:88:9e:5b:4b:c1:3b:ad:f7:93:
83:64:fc:96:96:78:14:1c:39:5d:a2:37:1f:c3:96:
4d:71:6e:f5:d3:e3:54:cc:0c:d1:55:39:cb:1c:e9:
eb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:95:72:55:9B:BE:E1:AC:34:0A:44:6B:13:C0:FB:EE:97:AA:81:60
X509v3 Authority Key Identifier:
keyid:01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:43:6c:b4:17:07:f7:95:1b:de:9b:0e:f8:02:18:a7:a3:5b:
8d:16:81:63:b7:8b:44:ff:90:0d:4f:55:ce:19:77:46:37:05:
3d:e4:98:7d:15:01:95:70:47:3b:25:18:00:75:d6:13:a7:0e:
dd:53:2c:02:89:7b:68:35:24:93:00:6f:68:ae:c7:a8:be:a3:
ec:84:87:9a:bc:53:3f:1b:4b:86:c2:75:71:52:6f:2b:cd:ab:
32:e1:ea:b1:f9:48:f4:3a:e4:f2:2c:3c:b5:02:3d:fd:2e:e4:
8f:73:c0:f7:53:a2:37:c9:03:94:3a:4b:e7:8e:9b:39:e2:f0:
d1:0e:07:f2:6e:ee:c7:48:35:45:61:a1:5b:4f:91:6b:e9:a9:
9f:4a:e5:31:ef:10:9c:02:38:af:a3:b3:30:ff:a4:62:48:a2:
d3:86:4c:13:1c:53:17:d1:66:89:37:f0:4e:f2:a0:5b:ea:ef:
17:10:c2:2f:89:41:43:7e:6e:54:83:e5:3f:b1:9b:1f:d8:7e:
7b:ea:eb:12:c7:0c:59:cb:7f:dc:6d:c5:3b:ce:ae:57:28:b6:
e4:ff:48:9a:40:b0:33:92:f3:67:1b:86:7c:46:a3:f5:85:4f:
4b:d7:41:56:87:6b:f5:6a:a7:77:7a:32:df:8f:92:18:7f:3e:
e3:47:7b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 10:57:49 2026 by rpki-client